CVE-2025-35987: Omission of Security-relevant Information

Omission of security-relevant information for some IntelR Software Guard Extensions Data Center Attestation Primitives within Ring 0: Kernel may allow a denial of service. Authorized adversary with a privileged user combined with a high complexity attack may enable data alteration. This result ma...

CVE-2026-20702: Protection Mechanism Failure

Protection mechanism failure for some IntelR Data Center Attestation Primitives IntelR DCAP may allow information disclosure. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via network...

PT-2026-70276

Name of the Vulnerable Software and Affected Versions IntelR Data Center Attestation Primitives IntelR DCAP affected versions not specified Description A protection mechanism failure may allow an unprivileged software adversary with an unauthenticated user to enable data exposure. This issue can ...

CVE-2026-22696

dcap-qvl implements the quote verification logic for DCAP Data Center Attestation Primitives. A vulnerability present in versions prior to 0.3.9 involves a critical gap in the cryptographic verification process within the dcap-qvl. The library fetches QE Identity collateral including qeidentity,...

CVE-2026-22696 dcap-qvl has Missing Verification for QE Identity

dcap-qvl implements the quote verification logic for DCAP Data Center Attestation Primitives. A vulnerability present in versions prior to 0.3.9 involves a critical gap in the cryptographic verification process within the dcap-qvl. The library fetches QE Identity collateral including qeidentity,...

CVE-2026-22696 dcap-qvl has Missing Verification for QE Identity

dcap-qvl implements the quote verification logic for DCAP Data Center Attestation Primitives. A vulnerability present in versions prior to 0.3.9 involves a critical gap in the cryptographic verification process within the dcap-qvl. The library fetches QE Identity collateral including qeidentity,...

The vulnerability of Intel SGX DCAP microprogramming software, which arises due to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of Intel SGX DCAP microprogramming software exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...